v1.2.0

What's Changed

• Update golang patch version by @Pavani-Panakanti in #353
• Fix error handling while publishing events to cloudwatch by @Pavani-Panakanti in #363
• Restart container if grpc handler setup fails by @Pavani-Panakanti in #364
• Fix standard mode return packet drop at pod startup by @Pavani-Panakanti in #361
• aws-eks-na-cli changes to dump new ebpf map by @Pavani-Panakanti in #366
• Attach new probes at start if probe update required by @Pavani-Panakanti in #365
• Find the host veth name before attaching or detaching probes by @jaydeokar in #367
• Fix getting the latest k8s version by @jaydeokar in #370

Full Changelog: v1.1.6...v1.2.0

Key Fix

This release includes important fix for issue #345 which will prevent return packets from being dropped at pod start in standard mode.

• Any newly created pods after upgrading to v1.2.0 will not be affected by this issue
• Enabling network policies for the first time on any existing pods from before this release can still run into this issue
• For more details on AWS network policy modes and their functionality, refer to the documentation:
  AWS Network Policy Enforcing Mode (v1.17.1+)

v1.1.6

What's Changed

• [strict mode] Fix race condition due to concurrent rpc go routines by @Pavani-Panakanti in #337
• Bump github.com/onsi/gomega from 1.34.2 to 1.35.1 by @dependabot in #328
• Bump golang.org/x/sys from 0.26.0 to 0.27.0 by @dependabot in #343
• Bump github.com/aws/amazon-vpc-cni-k8s from 1.18.5 to 1.19.0 by @dependabot in #339
• Bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 by @dependabot in #340
• Bump k8s.io/api from 0.31.2 to 0.31.3 by @dependabot in #341
• Merge main into release-1.1 by @Pavani-Panakanti in #346

Full Changelog: v1.1.5...v1.1.6

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.2/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.2/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.2/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.2/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.2/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.19.2
amazon-k8s-cni:v1.19.2
amazon/aws-network-policy-agent:v1.1.6

v1.1.5

What's Changed

• Bump golang.org/x/sys from 0.25.0 to 0.26.0 by @dependabot in #331
• Avoid panic when network policy agent is disabled by @jaydeokar in #323
• Combined dependencies PR by @orsenthil in #333
• Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.5 by @dependabot in #329
• Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.21.0 by @dependabot in #330
• Bump k8s.io/client-go from 0.31.1 to 0.31.2 by @dependabot in #332
• Update .go-version by @jaydeokar in #335
• Golang version update by @jaydeokar in #336

Full Changelog: v1.1.4...v1.1.5

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.19.0/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.19.0/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.19.0
amazon-k8s-cni:v1.19.0
amazon/aws-network-policy-agent:v1.1.5

v1.1.4

What's Changed

• Bump golang.org/x/sys from 0.24.0 to 0.25.0 by @dependabot in #315
• Bump github.com/onsi/gomega from 1.33.1 to 1.34.2 by @dependabot in #314
• Bump google.golang.org/grpc from 1.65.0 to 1.67.1 by @dependabot in #313
• Bump github.com/aws/amazon-vpc-cni-k8s from 1.18.3 to 1.18.5 by @dependabot in #312
• Bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.0 by @dependabot in #311
• Skip v4 rules on v6 cluster and vice versa by @Pavani-Panakanti in #321
• Fix race condition in strict mode and annotate_pod_ip=true by @Pavani-Panakanti in #322
• Merge main to release 1.1 by @orsenthil in #324

Full Changelog: v1.1.3...v1.1.4

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.6/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.6/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.18.6
amazon-k8s-cni:v1.18.6
amazon/aws-network-policy-agent:v1.1.4

v1.1.3

What's Changed

• Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.19.0 by @dependabot in #274
• Configure conntrack cache table size by @jayanthvn in #280
• Rule sorting/Strict mode fix by @jchen6585 in #289
• docs: Fix typo arg name for conntrack-cache-table-size by @younsl in #287
• Bump github.com/aws/aws-sdk-go from 1.50.30 to 1.55.3 by @dependabot in #291
• Update SDK and pass byte array by @jayanthvn in #299
• Fix race condition in strict mode by @Pavani-Panakanti in #306
• Bump k8s.io/apimachinery from 0.29.3 to 0.31.0 by @dependabot in #300
• Bump github.com/aws/amazon-vpc-cni-k8s from 1.18.1 to 1.18.3 by @dependabot in #295
• Bump k8s.io/client-go from 0.31.0 to 0.31.1 by @dependabot in #309

Full Changelog: v1.1.2...v1.1.3

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.4/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.4/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.18.4
amazon-k8s-cni:v1.18.4
amazon/aws-network-policy-agent:v1.1.3

v1.1.2

v1.1.2

Release Notes

None

Major Changes since v1.1.1

• Fix - Refactor conntrack cleanup for v4 and v6 (@jayanthvn)
• Fix - Remove callSkip to prevent Logger.check error(@ryota-sakamoto)
• Fix - Allow pods with . in it's name to be reconciled by network policy (@zachdorame )
• Fix - Handle PolicyEndpoint slice deletion gracefully (@achevuru)
• Dependency - Update ebpf SDK to v1.0.8(@jayanthvn)
• Dependency - Update ginkgo to 2.17.2 (@dependabot)
• Dependency - Update amazon-vpc-cni-k8s from 1.18.0 to 1.18.1 (@dependabot)
• Dependency - Update gomega to 1.33.0 (@dependabot)
• Dependency - Bump golang/x/sys from 1.18.0 to 1.19.0 (@dependabot)

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.2/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.2/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.18.2
amazon-k8s-cni:v1.18.2
amazon/aws-network-policy-agent:v1.1.2

v1.1.1

v1.1.1

Release Notes

None

Major Changes since v1.1.0

• Testing - Verify test results from all retries instead of just the last one (@jaydeokar)
• Dependency - update golang protobuf to 1.33.0 (@haouc)
• Dependency - Bump k8s.io/apimachinery from 0.29.1 to 0.29.3 (@dependabot)
• Dependency - Update env variable to enable strict mode for Network Policy (@jaydeokar)
• Dependency - Update env variable for kube config path (@jaydeokar)
• Dependency - Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@dependabot)
• Dependency - Bump github.com/google/uuid from 1.4.0 to 1.6.0 (@dependabot)
• Dependency - Bump github.com/aws/aws-sdk-go from 1.50.9 to 1.50.30 (@dependabot)
• Dependency - Bump go.uber.org/zap from 1.26.0 to 1.27.0 (@dependabot)
• Dependency - Bump sigs.k8s.io/controller-runtime from 0.17.0 to 0.17.2 (@dependabot)
• Dependency - Update golang to 1.21.9 (@jchen6585)
• Enhancement - Repo controlled build go version (@xdu31)

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.18.1/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.18.1/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.18.1
amazon-k8s-cni:v1.18.1
amazon/aws-network-policy-agent:v1.1.1

v1.1.0

v1.1.0

Release Notes

Network Policy agent now supports a strict mode for network policy enforcement.

Major Changes since v1.0.8

• Enhancement - Network Policy Strict mode support (@achevuru)
• Enhancement - Use Minimal base image for Network Policy Agent & golang version update (@jdn5126 )
• Testing - [Updates to testing infra and E2E] (@jaydeokar)

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.17.1/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.17.1/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.17.1/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.17.1/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.17.1/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.17.1
amazon-k8s-cni:v1.17.1
amazon/aws-network-policy-agent:v1.1.0

v1.0.8

v1.0.8

Major Changes since v1.0.7

• Bug - Fix metrics logging error; Remove version log (@jdn5126)
• Bug - Add prefix to identify log stream for network policy events (@jaydeokar)
• Bug - Conntrack table enhancements and replica race conditions (@jayanthvn)
• Bug - Handle PE split cleanup and duplicate l4info (@jayanthvn)
• Enhancement - eBPF SDK upgrade (@jayanthvn)
• Testing - [Updates to testing infra and E2E] (@jaydeokar)

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.3/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.3/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.3/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.16.3/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.16.3/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.16.3
amazon-k8s-cni:v1.16.3
amazon/aws-network-policy-agent:v1.0.8

v1.0.7

v1.0.7

Major Changes since v1.0.6

• Bug - Ignore PE slices tied to same NP during clean up flow (@achevuru )
• Bug - Fixes an issue where under certain scenarios cidrs values are overwritten (@jayanthvn )
• Bug - Fixes the issue with aws-eks-na-cli where it fails to get loaded-ebpfdata (@jayanthvn )
• Enhancement - Added a flag which defines the conntrack cache cleanup duration (@jayanthvn)
• Improvement - Updates golang version from v1.21.4 to v1.21.5 (@jaydeokar )

To manually upgrade to this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.15.5/config/master/aws-k8s-cni.yaml

Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.15.5/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.15.5/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.15.5/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:

Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.15.5/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3                                                 
amazon-k8s-cni-init:v1.15.5
amazon-k8s-cni:v1.15.5
amazon/aws-network-policy-agent:v1.0.7